[pkg-apparmor] Feedback on "Updating a profile in Debian’s apparmor-profiles-extra package"

[Cameron Norman]

On Thu, Jan 29, 2015 at 9:48 AM, u <u at 451f.org> wrote:
> Hi,
>
> I simply wanted to say that I have gotten some feedback [1] on the
> latest blogpost which appeared on planet.d.o
>
> I think blogging about how usable AppArmor in Debian is, is a great idea
> and I want to do that before the end of the internship.
>
> As for the second question asked, maybe one of you could answer this:
> "do you have plans on working on violation detection tool, like SUSE had
> with YaST2, and Fedora had with setroubleshootd?".

There is apparmor-notify, but last I heard there were a few bugs that
made it imperfect in actually notifying the user (I think it works
fine if you have auditd installed). Otherwise, simply grepping through
/var/log/kern.log for DENIED= messages works for more in depth
investigation.

Cheers,
--
Cameron Norman